howknows / awesome-windows-security-development
awesome-windows-security-development
☆169Updated 6 years ago
Alternatives and similar repositories for awesome-windows-security-development:
Users that are interested in awesome-windows-security-development are comparing it to the libraries listed below
- Windows Kernel Drivers fuzzer☆306Updated 7 years ago
- Research on Windows Kernel Executive Callback Objects☆284Updated 4 years ago
- Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.☆314Updated 10 months ago
- Idapython script to carve binary for internal RPC structures☆230Updated 10 months ago
- Process Doppelgänging☆155Updated 7 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆586Updated 7 years ago
- Tools for instrumenting Windows Defender's mpengine.dll☆292Updated 6 years ago
- Local privilege escalation PoC exploit for CVE-2019-16098☆193Updated 5 years ago
- A collection of my IDA plugins☆131Updated 4 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆199Updated 4 years ago
- Reverse engineered source code of the autochk rootkit☆201Updated 5 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆220Updated 4 years ago
- FLARE Kernel Shellcode Loader☆175Updated 5 years ago
- This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…☆266Updated 4 years ago
- ☆231Updated 7 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆209Updated 5 years ago
- Windows RPC Python fuzzer☆159Updated 7 years ago
- This is a place to share my miscellaneous projects.☆111Updated 4 years ago
- Windows Kernel Programming☆124Updated 4 years ago
- Position Independent Windows Shellcode Written in C☆287Updated 6 years ago
- Simple 32/64-bit PEs loader.☆136Updated 6 years ago
- ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…☆219Updated last year
- This is a simple example and explanation of obfuscating API resolution via hashing☆233Updated 4 years ago
- Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits☆388Updated 5 years ago
- ☆243Updated 4 years ago
- POC and exploitation of vulnerabilities☆91Updated 2 years ago
- Extract Windows Defender database from vdm files and unpack it☆433Updated 5 years ago
- windows syscall table from xp ~ 10 rs4☆351Updated 6 years ago
- Universal Unhooking☆318Updated 6 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆426Updated 6 years ago